CVE-2022-1495: Authentication Bypass by Spoofing

Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page...

Malicious code in deere-ui-basic-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57581e423cb9729c047dfc59ba3efb537cd100dbe1048d054c7ba1968cc4f144 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2402 Malicious code in deere-ui-basic-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57581e423cb9729c047dfc59ba3efb537cd100dbe1048d054c7ba1968cc4f144 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the filename parameter in the 'New Page' dialog on the Overview or Pages page. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an...

Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog

Cross site scripting XSS in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog...

XSS via `filename` parameter to New Page dialog

Cross site scripting XSS in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog...

CVE-2020-35305

Cross site scripting XSS in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog...

Cross site scripting

Cross site scripting XSS in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog...

CVE-2020-35305

CVE-2020-35305 describes a Cross-site Scripting (XSS) vulnerability in gollum versions 5.0 through 5.1.2, exploitable via the filename parameter in the New Page dialog. The root cause is improper handling/escaping of user-supplied filename input that is rendered in the UI, enabling injection of m...

CVE-2020-35305

Cross site scripting XSS in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog...

CVE-2020-35305

Cross site scripting XSS in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog...

CVE-2020-35305: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog...

PT-2022-8925

Name of the Vulnerable Software and Affected Versions gollum versions 5.0 through 5.1.2 Description The issue is related to cross site scripting XSS via the filename parameter to the 'New Page' dialog. This allows for potential exploitation. No information is provided about the estimated number o...

Gollum cross-site scripting vulnerability

Gollum is a simple wiki system built on top of Git by Gollum. It has a good API and a native front-end. A security vulnerability exists in Gollum versions 5.0 through 5.1.2, which originates from cross-site scripting XSS in gollum via filename arguments to the New Page dialog box...

Malicious code in gaia-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 371bc71161cb01b83fe4e01010df2ba01f573b504e8617e288e58d5f431dbefb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3267 Malicious code in gaia-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 371bc71161cb01b83fe4e01010df2ba01f573b504e8617e288e58d5f431dbefb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @feis-component/dialog-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e876109c73dbc34366e88507de8b00e4797110293c35bd31c15a71948e45f8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-270 Malicious code in @feis-component/dialog-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e876109c73dbc34366e88507de8b00e4797110293c35bd31c15a71948e45f8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31760

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality...

CVE-2022-31760

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality...